Who We Are

Direct Commercial Finance Limited is a privately-owned asset finance company, Company Registration Number 07842552. The terms ‘we’, ‘us’ ‘our’, ‘Direct Commercial Finance’ and ‘Company’ shall be construed as Direct Commercial Finance Limited.

This Privacy Notice applies where we are a data “controller” for the purposes of GDPR (as defined below), i.e. to the extent that we determine the purposes and means of the processing of your personal data.

Data Protection Officer

Direct Commercial Finance’s Data Protection Officer can be contacted with any comments, queries or concerns about this Notice or about any information we hold about you:

Telephone: 01474 327243
Address: Direct Commercial Finance Ltd
Unit J3
Springhead Enterprise Park
Springhead Road, Northfleet
Kent, DA11 8HL
Email: olb@dcfgroup.co.uk

About This Notice

This Notice explains how and when we use your personal information and for what reason(s) and related information, for example about your rights.
We refer in this Notice variously to ‘personal information’, ‘data’, ‘personal data’ and ‘personal details’. We use these terms interchangeably to mean information capable of identifying you.
Whilst you can visit our website without telling us who you are or providing any information about yourself which might identify you, if you do provide us with personal information about yourself for e.g. through submitting the contact form on our website or through an intermediary, we will only use this information in accordance with data protection law including in particular but not limited to the General Data Protection Regulation (EU) 2016/679 (‘GDPR’) and any applicable laws made under it.

What Information Do We Collect And Hold About You?

We collect personal information about you, through direct contact and when you provide it through a third party such as a appointed representative. We may also obtain personal information about you from third parties such as credit reference agencies and fraud prevention agencies.

The personal information you may be asked to provide, whether directly or through any other party, is likely to consist of (but not limited to) your name, contact details i.e. address, telephone number, email address, date of birth; financial status i.e. income and expenditure and employment. This will also be the case when you apply for finance with Direct Commercial Finance.

There are several other types of personal data that may be processed by us which are necessary in order that we may fulfil our contractual and legal obligations, in particular as detailed in the table below.

Type of personal informationDescription
FinancialYour financial position, status and history.
ContactWhere you live and how to contact you.
Socio-DemographicDetails about your work or profession and nationality.
Transactionalany insurance claims that may be made in relation to assets held under a facility you hold with us.
ContractualDetails about the Facilities entered into and / or any security provided by you or your associates.
CommunicationsInformation contained within letters, emails or texts and discussed during conversations with us.
Social RelationshipsYour family, friends and other relationships which have a bearing on your Facility held/ potentially held with us.
Open Data and Public RecordsDetails about you that are in public records, such as the Electoral Register, and information about you that is openly available on the internet.
Documentary DataDetails about you that are stored in various documents or copies of them for e.g. your passport, driving licence or birth certificate.
ConsentsAny permissions, consents or preferences that you give us. For e.g. how you want us to contact you, whether you get paper statements, or prefer large-print formats.
National IdentifierA number or code given to you by a government to identify who you are, such as a National Insurance number (this may be provided in the form of a social security benefit letter or pension letter issued by the government and provided to us for the purposes of anti-money laundering).
Other data

• Health data

• Criminal convictions and offences

Any other information relevant to our decision to grant a facility to you, including that provided by any credit reference or fraud prevention agency.

Purposes And Legal Basis For Processing Your Personal Information

The protection of your personal information is very important to us and we will only process your personal information for the following purposes:

  • a) to allow us to deal with your enquiries
  • b) to provide you with a service
  • c) to authenticate your identity
  • d) to manage our relationship with you
  • e) to inform you about our products and services , including by direct marketing
  • f) for administrative purposes
  • g) for debt administration and factoring
  • h) for purposes related to our proposed corporate activity, such as a sale or merger
  • i) to maintain our own accounts and records
  • j) to support and manage our employees
  • k) where required to do so by law for e.g. sharing for crime prevention.

At Direct Commercial Finance we rely on the following legal bases for the processing of your personal information, depending upon the purpose:

Contract: where necessary to perform a contract with you or to take steps at your request before entering into a contract with you.

Consent: in some cases, we may request your consent for processing, if so this will be specific to the processing and we will inform you of the purpose and you can provide or refuse such consent at your discretion.

Legitimate Interests: where necessary for our legitimate interests or those of third parties which are not overridden by your interests, rights or freedoms. These comprise providing our services, direct marketing, fraud prevention, ensuring network and information security, indicating possible criminal acts or threats to public security, processing employee or client data and administrative transfers within our group of companies.

Legal Obligation: where Direct Commercial Finance is under any legal obligations, e.g. with respect to anti-money laundering or other regulatory matters, which requires us to process or share personal data.

Ordinarily the lawful basis relied on by Direct Commercial Finance is that of contract, legitimate interests or legal obligation depending on the purposes of the processing. However, for transparency and good housekeeping, we may also request your specific consent from time to time for e.g. prior to undertaking a credit search or taking and retaining copies of your identification documents, but where one of the other bases above applies, we do not rely on that as the sole legal basis of processing.

If you have provided consent to our processing of your personal data, your consent can be withdrawn at any time by contacting the Data Protection Officer. This will not affect processing before withdrawal or which is based on another lawful basis of processing.


We may provide your personal data to the following recipients:

  • credit reference agencies
  • fraud prevention agencies, law enforcement
  • persons who may provide goods and services that we believe would be relevant to you
  • our service providers, including anyone we appoint as a data processor
  • financiers, including block discounters, banks and other financial institutions
  • professional advisers for e.g. solicitors, accountants, auditors, enforcement / tracing agents and valuers
  • consultants / contractors
  • insurance providers
  • prospective purchasers of our business or company and their advisers
  • other members of our group of companies

Please note that some recipients may be located outside of the European Union (“EU”) in countries which have not been designated as ensuring an adequate level of protection for personal data. Where that is the case, see below.

Transfer of your personal data outside of the EU

Your personal information may be transferred outside of the EU for further processing in the context of any operation we may have outside the EU or by the recipients described above.

Except where the transfer is necessary to perform a contract with you or to implement pre-contract measures at your request or to perform or conclude a contract with a third party (including your associated business) in your interest, we will ensure at least one of the following safeguards is implemented:

  • we will only transfer the data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission; or
  • we will only transfer the data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission; or
  • where the transfer is to the USA, the recipient is within the EU-US Privacy Shield.

Retention Of Personal Information

We keep your personal information for the following periods:

  • where you have proceeded in doing business with us for six years after termination of the business relationship, except where the law requires us to keep it for longer;
  • in other cases, we retain data for as long as the law requires us to do so.

Personal information will not be held for longer than is necessary for the purposes for which it was processed and will be periodically reviewed to determine whether retention is still required.

Your Rights As A Data Subject

You may have a right to the following:

  • Right to be informed
  • Right of access
  • Right to rectification
  • Right to erasure
  • Right to restrict processing
  • Right to data portability – for e.g. you may be able to request for your personal data to be transferred from one data controller to another in certain circumstances
  • Right to object
  • Rights related to automated decision making including profiling
  • Right to lodge a complaint with our supervisory authority, namely the Information Commissioner Office (“ICO”):

Information Commissioner Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF
Telephone: 0303 123 1113 www.ico.org.uk.
To exercise any of these rights, please contact Direct Commercial Finance Data Protection Officer.

Withdrawing Consent

As mentioned above, where processing of your personal data is based only on your consent, you have the right to withdraw that consent at any time. Your withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

How To Complain

Complaints can be made to us at any time, free of charge in person, by telephone (including text message), email, letter, fax or via the website to any member of staff at Direct Commercial Finance. This is without prejudice to your right to complain to our supervisory authority, the ICO.

Links To Other Websites

Our website may contain links to other sites and personal information may be collected through those other websites, however, this Privacy Notice does not apply to those websites.

Changes To Our Privacy Notice

We keep this Notice under regular review and, as such, the Notice may change from time to time. We recommend that you read this Notice before submitting any personal information to us through our website and regularly thereafter for any changes.
This Notice was last updated in May 2018.